e336be
From 0451d4e795929a69a0fda6d960aa4b077c5bd179 Mon Sep 17 00:00:00 2001
e336be
From: Dave Howells <dhowells@redhat.com>
e336be
Date: Fri, 5 May 2017 08:21:58 +0100
e336be
Subject: [PATCH 1/4] efi: Add EFI signature data types
e336be
e336be
Add the data types that are used for containing hashes, keys and
e336be
certificates for cryptographic verification along with their corresponding
e336be
type GUIDs.
e336be
e336be
Signed-off-by: David Howells <dhowells@redhat.com>
e336be
---
e336be
 include/linux/efi.h | 25 +++++++++++++++++++++++++
e336be
 1 file changed, 25 insertions(+)
e336be
e336be
diff --git a/include/linux/efi.h b/include/linux/efi.h
e336be
index ec36f42..3259ad6 100644
e336be
--- a/include/linux/efi.h
e336be
+++ b/include/linux/efi.h
e336be
@@ -614,6 +614,10 @@ void efi_native_runtime_setup(void);
e336be
 #define EFI_IMAGE_SECURITY_DATABASE_GUID	EFI_GUID(0xd719b2cb, 0x3d3a, 0x4596,  0xa3, 0xbc, 0xda, 0xd0, 0x0e, 0x67, 0x65, 0x6f)
e336be
 #define EFI_SHIM_LOCK_GUID			EFI_GUID(0x605dab50, 0xe046, 0x4300,  0xab, 0xb6, 0x3d, 0xd8, 0x10, 0xdd, 0x8b, 0x23)
e336be
e336be
+#define EFI_CERT_SHA256_GUID			EFI_GUID(0xc1c41626, 0x504c, 0x4092, 0xac, 0xa9, 0x41, 0xf9, 0x36, 0x93, 0x43, 0x28)
e336be
+#define EFI_CERT_X509_GUID			EFI_GUID(0xa5c059a1, 0x94e4, 0x4aa7, 0x87, 0xb5, 0xab, 0x15, 0x5c, 0x2b, 0xf0, 0x72)
e336be
+#define EFI_CERT_X509_SHA256_GUID		EFI_GUID(0x3bd2a492, 0x96c0, 0x4079, 0xb4, 0x20, 0xfc, 0xf9, 0x8e, 0xf1, 0x03, 0xed)
e336be
+
e336be
 /*
e336be
  * This GUID is used to pass to the kernel proper the struct screen_info
e336be
  * structure that was populated by the stub based on the GOP protocol instance
e336be
@@ -873,6 +877,27 @@ typedef struct {
e336be
 	efi_memory_desc_t entry[0];
e336be
 } efi_memory_attributes_table_t;
e336be
e336be
+typedef struct  {
e336be
+	efi_guid_t signature_owner;
e336be
+	u8 signature_data[];
e336be
+} efi_signature_data_t;
e336be
+
e336be
+typedef struct {
e336be
+	efi_guid_t signature_type;
e336be
+	u32 signature_list_size;
e336be
+	u32 signature_header_size;
e336be
+	u32 signature_size;
e336be
+	u8 signature_header[];
e336be
+	/* efi_signature_data_t signatures[][] */
e336be
+} efi_signature_list_t;
e336be
+
e336be
+typedef u8 efi_sha256_hash_t[32];
e336be
+
e336be
+typedef struct {
e336be
+	efi_sha256_hash_t to_be_signed_hash;
e336be
+	efi_time_t time_of_revocation;
e336be
+} efi_cert_x509_sha256_t;
e336be
+
e336be
 /*
e336be
  * All runtime access to EFI goes through this structure:
e336be
  */
e336be
-- 
e336be
2.9.3
e336be